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1 CONTROLLED USE OF DEVICES 

2 1. BACKGROUND OF THE INVENTION 

3 1.1 AREA OF THE INVENTION 

4 The present invention relates to method and system for 

5 controlling the use of devices which are controlled by an 

6 electric or an electronic circuit. In particular, the present 

7 invention relates to such method and system for selectively \ 

8 controlling specific types of operation of such devices. 

9 1.2 DISADVANTAGES OF PRIOR ART 

O 

ft The above mentioned term Mevice' should be understood in context 

li with the inventive concepts presented in here as very broad and 

H general. Basically, a broad variety of devices can be subjected 

to the method of the present invention and their use or their 

ft operation can be selectively controlled by it. 

® In general, many electronically controllable devices are provided 

Ift with an on/off switch in order to enable the device for 



operation. If the use of a device is sensible for questions of 

1% data security or access, in general, the device is protected with 

19 an access control system which a person intending to use the 

20 device has to pass prior using it. 

21 For example, a prior art method and system for controlling the 

22 personal use of a device can be a TV device being connected to a 

23 Pay- TV channel access system via a set-top box. The Set-top box 

24 acts as an access control system and provides card reader unit 
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1 for authenticating any registered user. After being identified a 

2 user can freely access the Pay-TV channels. 

3 A disadvantage of this kind of control can be seen in the fact, 

4 that the use of the device is either admitted - in total - or it 

5 is restricted in total. There are not provided any possibilities 

6 of defining selected types of operation and specifying individual 

7 constraints of usage for a specific device. Such sophisticated 

8 access control logic would require . intelligent back-end systems 

9 with some sort of a user management system. The possibility to 

10 allow a selected type of operation and certain constraints of 

11 usage, however, is desirable for devices in many cases -even in 

12 such cases in which a device is not provided with any access 

13 control system and no user management infrastructure at all. For 
1^ example, a common TV device can only be locked into a cupboard, 

M so the access to the TV is prevented generally, when the cupboard 

3J6 is locked, and such desired selective type of device operation is 

iW only possible with an adult person surveying the children's 
TV-channel selection. 

P 

In this case, however, the use of the TV device would be desired 

^ for children only during predetermined intervals of time, at 

M specific days and on specific channels, in addition only a 

22 specific total time of watching television in a week could be 

23 desirable. 

24 Different devices have always different procedures of controlling 

25 their operation. In case of a car sharing company it is difficult 

26 to control the duration of time in which the car is used by a 

27 client. As the duration of such use can be considered as a basic 

28 requirement for the client's bill an exact determination of said 

29 duration of device operation would be desirable. 
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1 1.3 OBJECTS OF THE PRESENT INVENTION 

2 It is thus a general aim of the present invention to provide a 

3 method and system for controlling the personal use of devices the 

4 operation of which is controllable by an electronic control 

5 circuit in which the method allows some kind of user-related 

6 and/or user-initiated selection of different types of operation 

7 of the respective device whenever more than one type of operation 

8 is provided for the device or makes sense with the device. 

9 It is a further object of the present invention to provide such 
10 decentralized method and system such that using the method or 

U system will be comfortable for the user and universally to apply 

1 : 

% for a plurality of devices of the same type without needing to 

© establish a sophisticated user management infrastructure, 

ill 

2. SUMMARY AND ADVANTAGES OF THE PRESENT INVENTION 

According to the invention a method and system for selectively 

ij controlling the operation of the device is provided which uses 

kj some kind of personal authentication token, e.g., a JAVACard 

M connected to said device in order to control a particular type of 

19 use or the duration of use of the device, and - if desired - in 

20 order to interrupt the operation of the device or to delimit the 

21 operation when some kind of reason can be evaluated from some 

22 operation type specific or some user-related data stored in said 

23 card which might justify said decision. 

24 According to a preferred aspect of the present invention said 

25 token or, generally spoken, an authentication means is 

26 advantageously a Smartcard and in particular a Java Card, or any 
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1 other multi function smart card with the capability of 

2 downloading and executing software programs on the card, on which 

3 personal authentication data as well as some kind of account data 

4 are stored. Said account can be a time account in which the 

5 duration of the personal use and/or operation of the device is 

6 maintained and regularly compared to some predetermined time 

7 limits admitted to the user. 

8 A large variety of further criteria storable on the card emerge 

9 dependent of the type of the device. In case of a TV device the 

10 Smartcard advantageously holds program data which specify date 

11 and time during which a child for example is allowed to watch the 

12 program of some predefined TV channels. Alternatively, some film 
iU rating data can be stored on the card and can be subjected to an 
® evaluation which uses amongst others further data as, for 

Jt5 example, the age of the child the Smartcard is associated with in 

W6 order to provide a result if a user-selected, e.g. child-selected 

^ type of operation will be admitted to the child or not. In 

ft addition to that an identifier for a specific TV show could be 

^ stored, which the user is permitted to watch. Many further 

limitations of use are obvious such as, for example, the 

S limitation of the duration of use. 
O 

% According to a further preferred aspect of the present invention 

23 the logic which evaluates the above mentioned data is located at 

24 least partly on the Smartcard and provides a device operation 

25 control logic with a signal which is able to filter some admitted 

26 types of operation - if desired. An advantage of this solution is 

27 that one Smartcard can be used for a plurality of different 

28 devices holding the hardware extensions required for the devices 

29 on a minimum level. Thus, the overall costs for the system 

30 consisting of Smartcards and a plurality of devices is held low. 
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1 According to a further preferred aspect of the present invention 

2 the Smartcards belonging to the users are prograitutiable by a 

3 Master-SmardCard. Dependent of the type of device any criteria 

4 can be stored on the Smartcards subordinated to said 

5 Master-SmartCard by aid of a program which can only be invoked 

6 when a user invokes it who has run successfully an authentication 

7 procedure which acknowledges his status as a superuser. 

8 For the sake of improved security further security mechanisms may 

9 be provided with this solution as, for example, input and control 

10 of a superuser-ID and an associated password, as it is known in 

11 prior art. 

The preferred location of said program depends on the type of the 

tf? device and depends further on the complexity of operation 

M control. It can be located on the devices, programmed in a ROM 

tl5 memory as a part of an electronic circuit connectable with the 

^ Smartcard reader associated to the device. 

It is obvious that for example for the sake of economy of the 

M total control system the composition of the arrangement - i.e., 

5© the plurality of controllable devices, the plurality of 

13) subordinated Smartcards, the plurality of Master-Smartcards, the 

21 spatial or geographic distance between the devices, the business 

22 value of the devices, the costs for equipping already existing 

23 devices with the hardware and software system according to the 

24 present invention, etc. have to be considered carefully in order 

25 to implement an individual ^best-fit' solution. 

26 Further, the control logic can be distributed on more than one 

27 location, i.e. a part of it can be located on the Smartcard, 
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1 another part can be located for example as a hardware 

2 implementation of a piece of software in the device itself 

3 according to the above mentioned criteria. 

4 A general advantage of the present invention' s concepts is that 

5 the control system is very flexible such that the use of a device 

6 can be individually controlled according to a plurality of device 

7 specific criteria. When all data which is necessary to control 

8 the operation of one or a plurality of devices are stored on the 

9 user-associated Smartcard it is sufficient to provide each user 

10 with one Smartcard only, instead of a variety of cards for 

11 respective devices. Then, only one Smartcard per user is 

12 applicable and insertable into Smartcard readers corresponding to 
a respective plurality of devices without being obliged to 

& transfer personal, operation-related data from one device to the 

Its next. In other words, in a family where are three TV devices one 

tt"6 child needs only one Smartcard and not one Smartcard for each TV 

W device. The total duration of watching TV which was limited 

^f8 before for the child is stored and updated according to the 

Jtp child's TV consumption in the memory of the child's card - 

^ independent of the number of TV devices used by the child. 

m. Further, when the logic is concentrated on the Smartcard, any 
changes related to the hardware of the device do not influence 

23 the operation of the control system. And finally, when the logic 

24 of the criteria is changed the devices need not to be changed in 

25 the most cases. 

26 3. BRIEF DESCRIPTION OF THE DRAWINGS 
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1 The present invention is illustrated by way of example and is not 

2 limited by the shape of the figures of the accompanying drawings 

3 in which: 

4 Fig. 1 shows an example schematic block diagram comprising the 

5 most relevant components of a preferred embodiment of the present 

6 invention in form of a TV device the operation of which is 

7 controlled according to the present invention's method, and 

8 Fig. 2 is a flow chart showing the basic steps and decisions of a 

9 preferred embodiment of the method of the present invention when 

10 a user wants to watch TV with reference to the system depicted in 

11 Fig. 1. 

^ 4. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 

i'sl 
: 

I'l I 

P With reference to Fig, 1 an example arrangement according to the 

W present invention is shown with which the inventive method can be 

performed in order to control the personal use of a TV device. A 

^ TV device 10 is connected with and controlled by an electronic 

i& control circuit 12 incorporated in its casing. The electronic 

^ circuit 12 is able to control the operation of the TV device such 

that it can switch it on or off in order to let the user watch 

20 the current programs available. 

21 According to the present invention the electronic control circuit 

22 12 is connected to a Smartcard reader 14 which can read and 

23 process data and commands provided from a Smartcard 16 inserted 

24 therein. Said Smartcard is assumed to belong to a certain user 

25 who is a child of eleven years living in a family and a household 

26 having a plurality of three TV devices in total. According to the 
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1 principles of the present invention it is some aim of it to 

2 control the personal use of devices, such as the TV device 

3 depicted in Fig. 1. In order to be able to exhibit this function 

4 said Smartcard 16 has stored in its memory a user ID associated 

5 with the child and a list of TV emissions which the parents allow 

6 to be watched by the child. Further, there is stored a time 

7 account which reflects the total duration of time in which the 

8 child watches TV during a predetermined time interval, e.g., one 

9 week. For example, the child is allowed to watch TV for a total 

10 duration of 180 minutes per week. Further, there is stored in the 

11 memory of the Smartcard some additional data which serves as 

12 additional criteria in order to restrict the child from watching 

13 TV late in the evening, for example to prevent the child from 
watching some films showing too much of violence, sex, crime, 

B etc. 

M Further, the Smartcard is provided with an integrated 

5& microprocessor and advantageously with some Smartcard 

tfl application, so-called applets, in order to process the data 

i$ stored in its memory and to compare them with data read from the 

!S) TV device. This, however is described in more detail with 

Jfl reference to Fig. 2 later below. 

i!3 

% With reference back to the electronic control circuit 12 

23 connected to the TV device 10, said circuit is connected to a 

24 filter 22 which is interconnected between the antenna or video 

25 recorder, in general, between program source and the input port 

26 for the TV signal. 

27 The electronic control circuit 12 can be incorporated into the 

28 casing of the TV device, as well as the filter 22. Alternatively, 
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1 one of them, or both can be put into a small box to be connected 

2 with the TV and a Smartcard reader unit. 

3 Alternatively, the Smartcard Reader 14 and the control circuit 12 

4 and the filter 22 can be incorporated in the TV device, as well 

5 as assembled in said box connectable with the TV device. Or, the 

6 Smartcard reader 14 could be excluded from the arrangement 24 

7 such as being external to it for improve flexibility. This is 

8 depicted in Fig. 1 with the arrangement 24 surrounded by broken 

9 lines. The communication between arrangement 24 and the Smartcard 

10 reader 14, or connector for any other secure token, could be 

11 secured by the use of encryption for the data transmitted as well 

12 as by sealing the physical connectors. 

•ft In any of the above mentioned variations some connection between 
the remote control unit associated with the TV device will be 

M advantageously provided in order to let the user comfortably 
select the channel, etc. by aid of the remote control unit. 

h17 In order to do this, the box is provided with an infrared sensor 

and a respective signal receiving unit in order to receive the 

IW control signal from the remote control unit and pass it to the 

JS) electronic control circuit for processing which is described in 
more detail later below with reference to steps 170, 180, ... of 

22 Fig. 2. 

23 Alternatively, the signal from the remote control unit can be 

24 received by the sensor circuit incorporated in the TV. Then, 

25 however, at most the channel-select signal is fed from said 

26 circuit to the electronic control device external to the TV for 

27 performing the same evaluation as stated above. 
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1 Advantageously, any electrical connection between said external 

2 arrangement 24 and the TV device as well as the Smartcard reader 

3 can be sealed in order make any interruption or switch off of the 

4 arrangement 24 visible to the parents of the child. 

5 With additional reference now to Fig. 2 a preferred embodiment of 

6 the inventive method will be described in more detail which will 

7 illustrate as well the operation of the inventive arrangement 

8 depicted in Fig. 1. 

9 The eleven year old child wants to start watching TV. Thus he 

10 inserts his personal Smartcard 16 into the Smartcard reader 14 in 

11 a step 110. In this particular embodiment the on/off switch of 

12 either the TV device itself or that of the remote control can be 

E — E 

© operated only when a Smartcard is inserted into said Smartcard 

% reader. Thus, an activation signal is fed from an operation 

p control logic circuit 28 placed on the Smartcard, in order to 

% activate the electronic control circuit 12 for preparing the 

fF begin of operation of the TV device. Said activation signal is 

U fed via line 30. 
\n 

W Activation is further confirmed to said operation control logic 

28 via a line 32 connected between electronic control circuit 12 

M and Smartcard reader 14 as well. This is depicted in Fig. 1. 

22 Next, in a step 120 some current operation specific data, further 

23 referred to as SOD is read from the device into the control logic 

24 28 in order to be processed by said logic. In this particular 

25 case said SOD comprises current date and current time. Further, 

26 it comprises a flag, indicating if a video signal from a video 

27 recorder possibly connected with the TV device is present on its 

28 signal input line. 
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1 Next, in a step 130, so called ^user-specific data' further 

2 referred to as US are read from the Smartcard memory 34 in order 

3 to identify the person intending to watch TV. At least, said US 

4 comprises a unique user-ID, at least unique in the family. Thus, 

5 the control logic 28 recognizes, that the eleven year old child 

6 wants to start watching TV. 

7 In order to perform the selectively controlled use of the TV 

8 device said logic 28 pre-evaluates in a step 140 US and SOD 

9 according to some preprogrammed data and with the help of some 

10 applet stored in the memory 34 of the Smartcard. In particular, 

11 during said pre-evaluation it is checked for a decision 150 if 

12 there is time enough resting on the time account of the card, and 
i| the current time of day is checked as well. If it is too late in 
l| the evening or during the night, or if there is no more time left 
y in the time account, the card is ejected - step 160 - from the 

V§ slot and watching TV is prohibited. If yes, the child is 

1,0 

Iff basically allowed to watch TV and can select a TV-channel -step 

18 170 described in more detail below. A more specific and selective 

|§ evaluation of the user's choice will be performed after said 

M selection of TV input, i.e., the TV channel number or the 

13 actuation of a switch for input of a video signal from a 
M connected video recorder. 

23 Said preprogrammed data was programmed before by the child's 

24 parents, e.g., using a mastercard provided with a secret key only 

25 known to the parents in order to provide the" child's Smartcard 

26 with data describing and determining TV emissions which he is 

27 allowed to watch. In particular, advantageously a TV channel 

28 number and associated emission time, or, alternatively, the show 

29 view code of emissions can be stored on the card, and it can be 
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1 specified if watching it shall be allowed to the child or not. If 

2 the evaluation yields that there is an emission which the child 

3 is allowed to watch, in a step 150 a corresponding 

4 Mevice-enable' signal is fed from the control logic 28 into the 

5 electronic control circuit 12 in order to prepare the TV device 

6 for operation. 

7 With reference to step 170 a user action is expected. The user 

8 action can for example be pushing a respective channel-select 

9 button located on the remote control of the TV device, or, 

10 alternatively, pressing the corresponding button on the device's 

11 operation console. Further, said user action can be pressing the 

12 button which selects a video recorder connected to the TV device. 
,13 Any of them is understood for the purposes of the present 

invention's disclosure as a 'User-Desired Operation Item', 

Jii further referred to as UDOI . It is assumed now that the user 

if6 presses the channel-select button 2 on the remote control. Thus, 

=K7 a UDOI is defined. Further, it shall be assumed that the current 

IfB time is 3,30 p.m. 

'Q 

rjp The electronic control circuit 12 feeds back the user's choice to 

^ the operation control logic 28 placed on the Smartcard 16 via 

igl line 32 and said signal is read in a step 170 by said control 

^ logic. An algorithm preprogrammed in said operation control logic 

23 28 compares the user choice with the list of admitted operation 

24 items which were in turn preprogrammed before by the parents of 

25 the child. In practice, such an evaluation 170 can be performed 

26 by a plurality of ' IF' -statements which are checked subsequently. 
27 

28 Then, in a decision 180 a YES-or RELEASE-signal is output when 

29 there is found a film inside the allowed film list and the 
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1 selected UDOI is released/ the film can be watched as depicted in 

2 step 190. Or, in the no-branch of decision 180 the desired 

3 operation item (UDOI) of the TV device is restricted -step 200, 

4 if no pair of channel-number and current time fits to the allowed 

5 list data stored on the child^ s Smartcard, 

6 Then, the system is ready for further user inputs, for example in 

7 order to change the program channel or to switch off the TV 

8 device. 

9 When the child watches TV the time account stored on the 

10 Smartcard is updated regularly in periodic intervals of time, as 

11 e.g. every one minute. To do this, the output of a timer device 

12 not depicted in Fig. 1 is regularly read by the operation control 
Jl logic 28 via line 30, and the time data is fed via line 32 to the 
U logic 28, which in turn accumulates the time spent for watching 
ifS TV on the time account of the child. 

jjl If, for example, the maximum time which the child was admitted to 

47 watch TV has exceeded, the operation of the TV will be broken. 

Some warnings can be put out via the screen of the TV device at 

li regular intervals in order to prepare the child and to inform it 

^ before the operation is switched off. 

21 It is obvious that the inventive concepts are very broadly 

22 applicable. The devices mentioned in the text of the present 

23 application can be any device having an electronic or electric 

24 control circuit which switches the operation on or off, or, 

25 depending of the type of the device, which enables a specific, 

26 selective type of operation of that device. Examples of specific 

27 operation types or operation items are: 
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1 selecting a particular channel-number for watching TV, selecting 

2 a video recorder for feeding the input-signal for the TV. 

3 Further, when the device is a computer said selected type of 

4 operation can advantageously be the invocation of one of a subset 

5 of programs installed on the hard-disk of the computer itself or 

6 in the network to which a computer is connected with. 

7 When the device is a car belonging to a car sharing company the 

8 duration of use can be easily controlled by the company. In this 

9 example, however, there is generally only one type of operation 

10 of the car, i.e. to go with the car with a running motor. In this 

11 example however, an extension can be included when the car is 

12 coupled to the GPS-system which enables the car sharing company 
.13 to control the position of the car and, eventually the direction 
C4 in which it is moved on a large scale. Then, a second type of 

3l5 operation could be established, namely, not to enter into a 

ijl5 predetermined geographical region, or, to move the car only in 

IW predetermined large scale-directions. The same applies of course 

=f8 for companies which are renting cars to people. 

^ The inventive method can be advantageously applied even for 

=ib allowing selective use of operation of a plurality of computers. 

This can be required in a company having many employees and a 

^2 large number of desktop computers and notebooks forming a part of 

23 the company's network, when the employees have often to change 

24 their desks and are constraint to make their job with the help of 

25 different computers, i.e., they use not a personal computer, but 

26 an 'unpersonalized' form by that kind of rotation of working 

27 sites. In this exemplary situation, the access to the computer's 

28 programs or local disk areas can be selectively allowed, or 

29 restricted, respectively, while the data for doing said are 

30 stored on the card only and not in the computer. 
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1 The present invention can be realized in hardware, software, or a 

2 combination of hardware and software. A typical combination of 

3 hardware and software could be a Smartcard with an applet or any 

4 other software running on the Smartcard in more or less close 

5 interaction with a piece of software implemented in the device or 

6 associated to it, that, when being executed, controls the 

7 Smartcard such that it carries out the methods described herein. 

8 The present invention can also be embedded in a computer program 

9 product, which comprises all the features enabling the 

10 implementation of the methods described herein to SmartCards in 

11 order to upgrade them in order to carry out the inventive method 

12 as a whole or partly. Computer program means or computer program 
12 in the present context mean any expression, in any language, code 
® or notation, of a set of instructions intended to cause a system 
M having an information processing capability to perform a 

p particular function either directly or after either or both of 

the following a) conversion to another language, code or 

m notation; b) reproduction in a different material form. 

-n 

1^ In the foregoing specification the invention has been described 

Is with reference to a specific exemplary embodiment thereof. It 

O will, however, be evident that various modifications and changes 

22 may be made thereto without departing from the broader spirit and 

23 scope of the invention as set forth in the appended claims. The 

24 specification and drawings are accordingly to be regarded as 

25 illustrative rather than in a restrictive sense. 

26 In particular, the control logic required to perform the 

27 selective operation types of the device can be located in the 

28 Smartcard - or it can be distributed between Smartcard and the 
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1 device, or, if suited, it can be combined with any logic being 

2 installed on the interface means, as e.g., the Smartcard reader. 

3 Further, the inventive concepts are obviously extendible with 

4 mechanisms in order to update the user's authentication means as 

5 e.g. a Smartcard with new data - e.g. for refreshing the time 

6 account, or for automatically load new show-view Codes for 

7 admitted emissions. 

8 Further, account data can comprise cash data, too. Cash data can 

9 be updated by any mechanism suited, as e.g. in cooperation with a 

10 banking software, a cash dispenser, etc., or in direct contact 

11 with the owner of the devices to be controlled. Thus, it is 
L2 possible to allow a selective use of the device only when the 
i| user has paid for it. 

5.3 i 

P It is obvious that many scenarios exist in which combinations of 

ill one or more of the before mentioned aspects combine in order to 

provide a best-fit solution of the inventive concepts. It is 

17 thus noted that the foregoing has outlined some of the more 

ii pertinent objects and embodiments of the present invention. This 

|p invention may be used for many applications. Thus, although the 

description is made for particular arrangements and methods, the 

Tl intent and concept of the invention is suitable and applicable to 

22 other arrangements and applications. It will be clear to those 

23 skilled in the art that other modifications to the disclosed 

24 embodiments can be effected without departing from the spirit and 

25 scope of the invention. The described embodiments ought to be 

26 construed to be merely illustrative of some of the more prominent 

27 features and applications of the invention. Other beneficial 

28 results can be realized by applying the disclosed invention in a 
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1 different manner or modifying the invention in ways known to 

2 those familiar with the art. 

3 The objects of the invention are achieved by the features stated 

4 in enclosed independent claims. Further advantageous arrangements 

5 and embodiments of the invention are set forth in the respective 

6 dependent claims. 
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